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We consider remote state preparation protocols for a set of pure states whose projectors form a basis 
for operators acting on the input Hilbert space. If a protocol (1) uses only forward communication and 
entanglement, (2) deterministically prepares an exact copy of the state, and (3) does so obliviously — 
without leaking further information about the state to the receiver — then the protocol can be modified 
to require from the sender only a single specimen of the state. Furthermore, the original protocol and the 
modified protocol use the same amount of classical communication. Thus, under the three conditions 
stated, remote state preparation requires at least as much classical communication as teleportation, as 
Lo has conjectured [PRA 62 (2000) 012313], which is twice the expected classical communication cost 
of some existing nonoblivious protocols. 

Teleportation H is a protocol that enables a quantum state to be transmitted from a sender ("Alice") 
to a receiver ("Bob") using only quantum entanglement and classical communication. To communicate 
any state in a 2-dimensional Hilbert space (qubit), it suffices for Alice and Bob to share 1 EPR state (ebit), 
-^(|00} + |11)) and for Alice to send 2 classical bits (cbits) to Bob. These resources are also necessary, because 
teleportation preserves the entanglement shared between the transmitted state and any other systems, and 
can be used to share entanglement or to perform superdense coding The procedure for teleportation 
does not depend on the transmitted state, with a trivial consequence that pure states cannot be sent with 
fewer resources. 

More recently, Lo || studied methods to transmit quantum states using entanglement and classical commu- 
nication when the sender has knowledge of the transmitted state. This communication task is called remote 
state preparation (RSP). RSP protocols more economical than teleportation were found for certain ensembles 
of pure states. [] The suggested possibility to trade off the two resources were studied in detail ||, 

Resource lower bounds for RSP of pure states are generally difficult to establish. Unlike teleportation, RSP of 
pure states need not preserve the entanglement of the transmitted system with other systems, so that neither 
lower bounds for teleportation applies. For instance, the classical communication cost for RSP of an arbitrary 
pure d-dimensional state is only lower bounded by log d cbits (Holevo's bound ||), in contrast to the 21og<i 
cbits required for teleportation. In Ref. [||, Lo conjectured that 21oge? cbits are indeed necessary for RSP. 
But Ref. Q found probabilistic RSP protocols with an expected classical communication cost saturating 
Holevo's bound. However Ref. [[I] suggested that Lo's conjecture may still hold in certain circumstances, 
such as when the protocol uses a constant (non-probabilistic) amount of classical communication, or when 
it leaks no extra information to Bob about the state being prepared, beyond that already contained in the 
state itself. 

In this paper, we prove a stronger result that implies Lo's conjecture under circumstances to be defined. 



An ensemble is the set of quantum messages, endowed with a probability distribution, that the sender may send. 



We use the term "generic ensemble" to describe an ensemble of states whose density matrices form a basis 
of operators acting on some (input) Hilbert space. We say that an RSP protocol is oblivious to Bob if he 
obtains no more information about the prepared state than is contained in the single specimen, even if he 
deviates from the protocol. A protocol is called faithful if it is exact and deterministic. Finally, a protocol 
is said to be oblivious to Alice if it requires from her only a specimen of the transmitted state, but not her 
knowledge of it. With these definitions, we can state our result: 

If an RSP protocol for a general ensemble of pure states uses only forward communication and 
entanglement, and is faithful and oblivious to Bob, then it can be modified to be oblivious to 
Alice at no extra classical communication cost. 

An immediate corollary is that such an RSP protocol uses at least as much classical communication as 
required in teleportation. Our work also elicits conditions under which RSP is suboptimal to teleportation, 
and provides insights on how knowledge of the prepared states enables resource tradeoff in RSP. 

Our result follows from an explicit procedure to convert a faithful RSP protocol oblivious to Bob and using 
no back communication to a protocol oblivious to Alice. Suppose the original RSP protocol transmits any 
state 4> drawn from a generic ensemble of d-dimensional states. The most general faithful protocol without 
back communication is represented by the circuit: 

Fig.l 




In the above diagram, the entangled state shared by Alice and Bob is a maximally entangled state in 2 
d'-dimensional systems, \$>d') = -^p ( |H) + • • ■ + \d'd' } ). We do not require d = d' . The most general 
action of Alice is to apply to her half of \&d') a- trace preserving quantum operation f^, parameterized by 
the input (j> to reflect possible use of her knowledge of it. Since the communication is classical, should 
output some classical message m to be sent to Bob, with probability (p4,) m - Note that J2 m {p<f>)m = 1- The 
remaining classical or quantum output is collectively represented by a^f^- Since the protocol is faithful, 
there exists a "recovery" procedure for Bob that depends on m but not on <j). The most general procedure 
is a trace preserving quantum operation lZ m acting on his half of f\ This procedure always outputs a 

copy of 4>, and some extra output . 

We now simplify the above circuit. Since the prepared state cj) is pure, it is unaffected if af ut ^ is traced 
out. Thus Alice's operation with only classical output, is just a POVM. On the other hand, since Bob's 
operation lZ m is trace preserving, it can be implemented by attaching a pure ancilla |0) and applying a joint 
unitary operation U m . The simplified circuit is given by: 



2 In principle, Alice can input an ancilla a± n ^ to but the effect is just a redefinition of 
3 Again, his possible use of an ancilla 6^ can be replaced by redefining TZm- 
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Fig. 2 




where p$ m denotes the state of Bob's half of the shared system given the message to. 

We now apply the oblivious condition. This implies b^^ and (p^) m are independent of <f> and can be written 
as &m Ut ^ and p m respectively; otherwise Bob can gain information about the identity of <p without disturbing 
his single specimen of it, violating the no-imprinting condition JtJ for a generic ensemble of states. We obtain 
an expression for p^ m using the state change due to U m , 

P<f,m = Tr 2 [Ul(<t>®bW)U m ] , (1) 

where Tr,g denotes the tracing of the second tensor component. Throughout the paper, an operation acts on 
the subsystem labelled by an italicized numerical subscript; the ordering is based on the equation containing 
the operation. 

We obtain another identity by describing in two different ways the state in Bob's half of the shared system 
before receiving the message to, 

2_,PmP<t>m = -Tj ■ ( 2 ) 

m 

Substituting Eq. (0) into Eq. (|), 

£ Vm [ Tr 2 Ul ( ® bt ut) )U m ]=^- (3) 
m 

Equating the left side of Eq. (^) to T{4>) defines an operation T acting on (p. Since the set of all possible <j> 
forms a generic ensemble, T is defined for all operators acting on the input Hilbert space, and it is simply 
the randomizing operation, J-(-) = 4j. 

We are now ready to describe a modified protocol in which Bob receives the same classical and quantum 
outputs as in the original RSP protocol but Alice applies a <ft independent measurement Ai to a single 
specimen of <j) an d her half of |3>d'): 



Fig. 3 




The POVM elements of M. are given by 

M m = dd> p m Tr 3 ( Ii ®U? 23 ) ( |$ d )($ d | i2 ® b^f T ){h® U* m23 ) (4) 
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We first verify that {M m } is a POVM acting on a d x dl system. According to Eq. ([j]), Jj <g> U^ n2 3 maps an 
operator acting on a d x d x dim(6m Ut ' > ) system to one acting on a d x d' x 1 system. The Tr,y in Eq. (^) 
then ensures M m acts on a d x g?' system. Each M m is manifestly positive. Furthermore, let X denote the 
identity operation. Using Eq. (H), 



^M T l = dd'(F®l)(\$ d }{$ d \)=I®I, 



(5) 



so that {M m } is indeed a POVM. Note that Ai is independent of <j>, and the modified protocol in Fig. 3 is 
indeed oblivious to Alice. It remains to verify that the modified protocol is the same as the original one 
from Bob's point of view. Let b be the state in Bob's half of the shared system when the measurement M. 
outputs to, normalized by the probability of outcome to. The modified protocol creates the correct state 
with the correct probability if b = p m p<pm- Evaluating b, 



b = Tr J2 [ ( fa <g> |$ d ,)($ d 'Us ) ( M ml2 g> I 3 ) 
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(6) 
(7) 

(8) 
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So, the (ji, j'2) entry of b is given by: 



Tr 



1 



d: 

dp m Tv 



^(4> T ®\ 32 ){3i\) Ml 

{<i> T ® \h){h\®l) (ii 



U, 



m 23 



( l*d><*dU* ® 6^5° ) [h ®u m23 ) 



Prn Tr 

Pm Tr 



(|j2><Jl|®J) ^(0®^)^ 



(9) 
(10) 

(11) 
(12) 
(13) 



Equation (||) is obtained from Eq. (H) using TrAB = TrA T i? T . Equation ( |l0| ) follows from substituting 
Eq. (0) and from the identity Tr ( A (Tr 2 B 12 ) ) = Tr ( ( A <g> J) i? ) . We trace out the first register and used 
dTrj [ $ \$d}($d\i2 ] =4> to obtain Eq. @. Equation @ is again due to the identity Tr ( A (Tv 2 Bi 2 ) ) = 
Tr ( (A (8) J) S ) . Thus b 

— PmP4>m, completing the proof of our major claim. 

We make some important observations. First, the modification leaves p m and therefore the classical com- 
munication cost unchanged. Second, while the original RSP protocol needs not preserve the entanglement 
shared between the transmitted system and other systems, the modified protocol does. Therefore, the 
modified protocol can be used for superdense coding, implying that it requires at least as much classical 
communication as teleportation. We emphasize that we have never removed the premise that the original 
protocol works only for pure states; it is the modification that makes the modified protocol more versatile. 
Putting these two observations together, the original RSP protocol must require at least 2 logd cbits, proving 
Lo's conjecture under the conditions imposed on the RSP protocol. 

An RSP protocol that deterministically prepares <p may use a probabilistic amount of resources. For example, 
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if an RSP protocol sometimes fails to prepare (f>, one can still teleport </> when the protocol fails and obtain 
a deterministic protocol with probabilistic resources. We remark that our result is applicable even when the 
required resources are probabilistic. In the general description of an RSP protocol in Fig. 1, the classical 
message m may have variable length and the extra outputs ct^f and may contain unused entanglement. 
The original and modified protocol require the same amount of classical communication in all measures, 
including the worst case and the average costs. 

We believe that the current result can be extended to provide a lower bound on the entanglement required 
by the original RSP protocol. When calculating the actual entanglement consumed by the original RSP 
protocol, one needs to take into account unused or 1-way distillable entanglement between and 
in Fig. 1 (this is especially important for the average or amortized cost). The simplifications leading to Fig. 2 
come at a price, since we might have discarded recoverable entanglement, and used more entanglement in the 
modified protocol. One can avoid such problem by including some 1-way entanglement recovery procedure 
as part of RSP and replacing Fig. 2 by In Fig. 4, the recovery procedure is represented by an extra classical 



message / and a variable amount of recovered entanglement in the outputs a' and b' . We believe that the 
above protocol can be made oblivious to Alice without affecting the classical and quantum outputs, and the 
method will be reported in the future. 

We can extend the current result to an RSP protocol that is not faithful. Instead the protocol sometimes 
prepares an exact copy of (f> but fails with some probability pf. Alice knows when it fails, and after Bob is 
informed of the failure, his half of the shared system is left in a state pf independent of </>. Our previous 
arguments for a faithful protocol hold almost exactly, except now ^] m p m = 1 — pf and Figs. 1-3 only occur 
with probability 1 — pj. Equations (||) and (||) are respectively replaced by ^2 m PmPrt>m. +PfPf = jp and 
PfPf + J2mP™. [ Trg ( (/) ® ) U m ] = -77-. The measurement M. in the modified protocol should now 
have an extra POVM element / <g> pj besides those specified in Eq. (|j). 

Our result gives insights on when RSP has no advantage over teleportation. The oblivious condition causes 
Bob's quantum state (given the classical message) to be one obtainable by applying a quantum operation on 
4> (see Eq. (Q)), which is a necessary condition for a protocol oblivious to Alice. This is in accord with the 
fact that most RSP protocols are not oblivious. We describe an example of an RSP protocol that uses only 
forward communication, and is faithful and oblivious to Bob, but works for a nongeneric ensemble. Each 
member in the ensemble is given by (f> = ^(1 + cos^cosry a x + cos0sin?7 <j y + sin# <r z ) where <t x . ViZ denote 
the Pauli matrices, each 77 can specify a member in the ensemble, and denotes a constant in [0,7r/2]. In 
other words, these states lie on a latitude on the Bloch sphere. In the RSP protocol, Alice and Bob share 1 
ebit per qubit prepared. To transmit (f>, Alice performs a trinary measurement with measurement operators 
M = (l-p)(j) T , Mi = (l-p)(a z (j)(j z ) T , and M 2 =p|l)(l|, wherep = sin0/(l+sm0) and M +Mi+M 2 = L 
When the measurement outcome is m = 0, 1, 2, Bob obtains (f>, a z (f>a z , and |1)(1| respectively, and in the last 



Fig. 4 
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case, Alice and Bob perform teleportation. When n qubits are to be prepared for large n, Alice can apply 
deterministic data compression S with variable message length. The average classical communication cost 
is n(H(p) + p+l) which is less than 2n for small p (latitudes close to the equator). This example illustrates 
that a generic ensemble is needed for our result to hold. 

We conclude with some open questions. Extensions to an RSP protocol that starts with some other entangled 
state rather than the EPR state, or one that uses back communication are interesting to consider. 
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